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AMENDMENTS TO THE CLAIMS 

The following is a complete listing of revised claims with a status identifier in 
parenthesis. 

LISTING OF CLAIMS 

1 . (Currently Amended) A method for signing access operations to electronic 

data, comprising: 

performing a security check upon each access operation in order to ascertain 
the identity of a user; 

assigning a user signature, identifying the user, on the basis of the performed 
security check without being viewable by the user; 

assigning at least one role signature, each role signature being assignable to a 
plurality of users, on the basis of the performed security check without being viewable 
by the user; 

signing [[an]] each access operation to electronic data by specifying the user 
signature and the at least one role signature ; and 

recording each access operation and the user signature and the at least one 
role signature specified for each access operation . 

2. (Original) The method as claimed in claim 1, wherein the security check 
involves biometric data from the user being ascertained. 

3. (Original) The method as claimed in claim 1, wherein the security check 
involves reading at least one of an electronic and mechanical key. 

4. (Original) The method as claimed in claim 1 , wherein the user signature to 

be assigned is ascertainable on the basis of the data ascertained in the security check, 
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by checking a user signature memory. 
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5. (Currently Amended) The method as claimed in claim 1, wherein the at 
least one role signature to be assigned is ascertainable on the basis of the data 
ascertained in the security check, by checking a role signature memory. 

6. (Original) The method as claimed in claim 4, wherein the user signature 
memory is checked using a data telecommunication link. 

7. (Original) The method as claimed in claim 1, wherein one user is assignable 
a plurality of role signatures simultaneously. 

8. (Currently Amended) The method as claimed in claim 1, wherein the data 
are medically relevant, wherein the users are medical specialist personnel, and 
wherein the at least one role[[s]] signature is [[are]] formed in line with the workgroups 
within the medical specialist personnel. 

9. (Currently Amended) A data processing facility, comprising: 
security check means for, prior to the data processing facility accessing 

application data, performing a security check upon each access operation in order to 

ascertain an identity of a user; and 

a signature tool, adapted to assign a user signature, identifying the user, on the 

basis of an output signal from the security check means without being viewable by the 

user, wherein the signature tool is further adapted to assign at least one role 

signature, each role signature being assignable to a plurality of users, on the basis of 

an output signal from the security check means without being viewable by the user, 
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and wherein the signature tool is still further adapted to sign each access 
operation[[s]] to electronic data by specifying the user signature and the at least one 
role signature , and wherein the signature tool is still further adapted to record each 
access operation and the user signature and the at least one role signature specified 
for each access operation . 

10. (Original) The data processing facility as claimed in claim 9, wherein the 
security check means is further for ascertaining biometric data from the user. 

1 1. (Original) The data processing facility as claimed in claim 9, wherein the 
security check means is adapted to read at least one of electronic and mechanical 
keys. 

12. (Original) The data processing facility as claimed in claim 9, wherein the 
signature tool has access to a user signature memory and is adapted to check the user 
signature memory, on the basis of an output signal from the security check means, for 
the user signature which is to be assigned. 

13. (Currently Amended) The data processing facility as claimed in claim 9, 
wherein the signature tool has access to a role signature memory and is adapted to 
check the role signature memory, on the basis of an output signal from the security 
check means, for the at least one role signature which is to be assigned. 

14. (Original) The data processing facility as claimed in claim 12, wherein the 
user signature memory is arranged remotely from the data processing facility, and 
wherein the signature tool has access thereto via a data telecommunication link. 
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15. (Original) The data processing facility as claimed in claim 9, wherein the 
data processing facility is a medical workstation. 

16. (Original) A storage medium, adapted to store information and adapted to 
interact with a data processing facility to perform the method as claimed in claim 1. 

17. (Original) The method as claimed in claim 2, wherein the security check 
involves reading at least one of an electronic and mechanical key. 

18. (Original) The method as claimed in claim 2, wherein the user signature to 
be assigned is ascertainable on the basis of the data ascertained in the security check, 
by checking a user signature memory. 

19. (Original) The method as claimed in claim 3, wherein the user signature to 
be assigned is ascertainable on the basis of the data ascertained in the security check, 
by checking a user signature memory. 

20. (Currently Amended) The method as claimed in claim 2, wherein the at 
least one role signature to be assigned is ascertainable on the basis of the data 
ascertained in the security check, by checking a role signature memory. 

21 . (Currently Amended) The method as claimed in claim 3, wherein the at 
least one role signature to be assigned is ascertainable on the basis of the data 
ascertained in the security check, by checking a role signature memory. 
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22. (Original) The method as claimed in claim 5, wherein the role signature 
memory is checked using a data telecommunication link. 

23. (Canceled) 

24. (Canceled) 

25. (Original) The data processing facility as claimed in claim 11, wherein the 
signature tool has access to a user signature memory and is adapted to 

check the user signature memory, on the basis of an output signal from the security 
check means, for the user signature which is to be assigned. 

26. (Canceled) 

27. (Currently Amended) The data processing facility as claimed in claim 1 1 , 
wherein the signature tool has access to a role signature memory and is adapted to 
check the role signature memory, on the basis of an output signal from the security 
check means, for the at least one role signature which is to be assigned. 

28. (Original) The data processing facility as claimed in claim 13, wherein the 
role signature memory is arranged remotely from the data processing facility, and 
wherein the signature tool has access thereto via a data telecommunication link. 

29. (Currently Amended) A data processing facility, comprising: 

security check means for, prior to the data processing facility accessing 

application data, performing a security check upon each access operation in order to 
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ascertain an identity of a user; and 

signature tool means for assigning a user signature identifying the user, on the 
basis of an output signal from the security check means without being viewable by the 
user, for assigning a t least one role signature, each role signature being assignable to 
a plurality of users, on the basis of an output signal from the security check means 
without being viewable by the user, [[and]] for signing access operations to electronic 
data by specifying the user signature and the at least one role signature , and for 
recording each access operation and the user signature and the at least one role 
signature specified for each access operation . 

30. (Original) The data processing facility as claimed in claim 29, wherein the 
security check means is further for ascertaining biometric data from the user. 

31 . (Original) The data processing facility as claimed in claim 29, wherein the 
security check means is adapted to read at least one of electronic and mechanical 
keys. 

32. (Original) The data processing facility as claimed in claim 29, wherein the 
signature tool means includes access to a user signature memory and is for checking 
the user signature memory, on the basis of an output signal from the security check 
means, for the user signature which is to be assigned. 

33. (Currently Amended) The data processing facility as claimed in claim 29, 
wherein the signature tool includes access to a role signature memory and is for 
checking the role signature memory, on the basis of an output signal from the security 
check means, for the at least one role signature which is to be assigned. 
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34. (Currently Amended) The data processing facility as claimed in claim 32, 
wherein at least one of the user signature memory and the role signature memory is 
arranged remotely from the data processing facility, and wherein the signature tool 
has access to at least one of the user signature memory and the role signature 
memory thereto via a data telecommunication link. 

35. (Canceled) 

36. (Original) The data processing facility as claimed in claim 29, wherein the 
data processing facility is a medical workstation. 

37. (New) The method as claimed in claim 1, wherein each access operation 
and the user signature and the at least one role signature specified for each access 
operation are recorded in an audit memory. 

38. (New) The data processing facility of claim 9, wherein the signature tool 
records each access operation and the user signature and the at least one role 
signature specified for each access operation in an audit memory. 

39. (New) The data processing facility of claim 29, wherein the signature tool 
means includes access to an audit memory and is for recording each access operation 
and the user signature and the at least one role signature specified for each access 
operation in the audit memory. 
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40. (New) A method for reconstruction of access operations to electronic data, 
comprising: 

signing each access operation, wherein 

a security check is performed in order to ascertain the identity of a user, 

a user signature is assigned, identifying the user, on the basis of the 
performed security check, without being viewable by the user, 

at least one role signature is assigned, each role signature being assignable 
to a plurality of users, on the basis of the performed security check, without 
being viewable by the user, 

the access operation is signed by specifying the user signature and the at 
least one role signature, and 

each access operation and the user signature and the at least one role 
signature specified for each access operation are recorded; and 
reconstructing each access operation by specifying at least one of the user 
signature and the at least one role signature. 

41. (New) The method as claimed in claim 40, wherein an access operation 
can be reconstructed by specifying at least one of the user's former and current role 
signatures. 

42. (New) The method as claimed in claim 40, wherein each access operation 
and the user signature and the at least one role signature specified for each access 
operation are recorded in an audit memory and are accessible for reconstruction. 
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